member server and check to see if you can change ACL's on a Share and if it has any effect.=20 =20 Now initialize Kerberos. #kinit -U admin at MYDOMAIN.NET =20 Re-run the commands above and note the change #klist #net ads user #net ads group =20